Cloud Security Engineer - OCI (Oracle Cloud Infrastructure) [Remote]

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cloud Security Engineer - OCI (Oracle Cloud Infrastructure) based in the United States.

This role focuses on designing, implementing, and maintaining secure cloud environments across leading cloud platforms, with particular emphasis on Oracle Cloud Infrastructure (OCI).
You will help organizations strengthen their security posture while meeting demanding regulatory and compliance requirements.
The position combines hands-on cloud engineering, security architecture, infrastructure automation, and incident response.
You will work directly with clients to identify vulnerabilities, remediate failing controls, and build repeatable security solutions.
The role also offers exposure to DevSecOps, container security, Zero Trust architectures, and multi-cloud environments.
You will operate in a fast-moving, collaborative environment where engineers take ownership and contribute directly to client outcomes.
This opportunity is well suited to a technically strong security professional who enjoys solving complex cloud challenges and turning requirements into practical controls.

Accountabilities

• Deploy, configure, and maintain cloud security controls across AWS, GCP, Azure, and Oracle Cloud Infrastructure (OCI), including compute, networking, storage, and IAM.

• Conduct detailed cloud security and architectural risk assessments to identify vulnerabilities, asset exposures, configuration weaknesses, and compliance gaps.

• Develop practical technical remediation plans and implement targeted solutions to strengthen cloud security without unnecessary disruption.

• Configure and manage enterprise security technologies, including SIEM and log analytics platforms, identity management solutions, IDS/IPS tools, vulnerability management systems, and network monitoring tools.

• Serve as a trusted technical advisor for assigned clients, managing project milestones, communication, technical escalations, and ongoing security initiatives.

• Build automated and repeatable security controls using Infrastructure as Code (IaC), including Terraform and cloud-native deployment technologies.

• Integrate continuous security guardrails into CI/CD pipelines and containerized environments to identify and address vulnerabilities earlier in the development lifecycle.

• Investigate cloud security incidents, perform technical analysis and forensic investigation, and implement containment and remediation measures.

• Support audit readiness through GRC platforms such as Vanta by collecting, validating, and maintaining evidence related to cloud configurations and security controls.

• Align cloud architectures and technical implementations with security and compliance frameworks such as SOC 2, ISO 27001, GDPR, HIPAA, and related requirements.

• Contribute to reusable security modules, automation tools, documentation, and engineering practices that improve team efficiency and consistency.

• Collaborate with technical teams, executives, and client stakeholders to communicate complex security risks in clear, actionable business terms.

Requirements

• Demonstrated hands-on experience securing distributed, multi-cloud environments across AWS, GCP, Azure, and Oracle Cloud Infrastructure (OCI).

• Strong knowledge of cloud security architecture, including IAM, network segmentation, encryption, access controls, and risk mitigation.

• Practical experience with OCI services spanning compute, networking, storage, and identity and access management.

• Advanced Infrastructure as Code and security automation skills, including Terraform, AWS CloudFormation, Python, and Bash.

• Experience mapping cloud-native configurations and controls to compliance frameworks such as SOC 2, ISO 27001, GDPR, HIPAA, or comparable standards.

• Strong troubleshooting and analytical skills, with the ability to diagnose infrastructure vulnerabilities, resolve failing controls, and implement effective remediation.

• Experience with enterprise logging, monitoring, vulnerability management, threat-hunting, and network traffic analysis tools.

• Familiarity with container and DevSecOps security, including Docker, Kubernetes, microservice architectures, and CI/CD security controls.

• Practical understanding of Zero Trust security models, identity-centric access policies, network micro-segmentation, and contextual access controls.

• Strong client-facing consulting skills and the ability to manage multiple priorities and client relationships simultaneously.

• Excellent written and verbal English communication skills, with the ability to translate technical risks into clear recommendations for technical and executive audiences.

• Experience working in fast-growth technology companies or managed security service provider environments is valuable.

• Relevant certifications such as AWS Certified Security – Specialty, Google Professional Cloud Security Engineer, CISSP, CISM, or CISA are preferred.

• U.S. work authorization is required, with no current or future employment visa sponsorship available for this position.

• Ability to work a standard schedule of approximately 8:00 AM–5:00 PM U.S. Eastern Time, with occasional flexibility for business needs and global collaboration.

• Reliable high-speed internet and a professional home-office environment suitable for confidential conversations and uninterrupted remote work.

• Willingness to travel locally on occasion for onsite meetings, team gatherings, or business activities.

Benefits

• Competitive base salary with performance reviews tied to merit-based progression.

• Bonus opportunities.

• Remote-first work environment with flexibility to work from anywhere in the United States.

• Career development opportunities with mentorship and training.

• Reimbursement for approved role-related training and certification courses.

• Opportunity for career advancement within a growing organization.

• Exposure to diverse cloud security, compliance, DevSecOps, and multi-cloud projects.

• Collaborative environment with opportunities to work directly with clients and experienced security professionals.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.